Royal & BlackSuit wreaked havoc with multi-million-dollar ransom schemes and double-extortion tactics, crippling healthcare and government operations. Now, rumors of a “Chaos” rebrand have everyone on edge – what’s their next move?
https://thedefendopsdiaries.com/the-rise-and-impact-of-royal-and-blacksuit-ransomware-gangs/
#ransomware
#cybersecurity
#infosectrends
#royalransomware
#blacksuitransomware
"🔥 Dallas Under Siege: Royal Ransomware Strikes! 🔥"
The City of Dallas reveals that the Royal ransomware attack in May began with a compromised account. The city had to shut down all IT systems as a precaution after their network printers began printing out ransom notes the morning of the incident.
Dallas, Texas faced a nasty ransomware attack by the Royal gang, starting with a stolen account. From early April to May, the gang got into the city's network, swiping over a terabyte of files before dropping ransomware into the system on May 3rd.
The city fought back, taking crucial servers offline and starting the long process of fixing things up with the help of cybersecurity experts. It took over five weeks to get all servers back up, from the financial to the waste management ones.
The attack exposed personal info of over 30,000 individuals, costing the city a whopping $8.5 million for recovery efforts. The Royal gang, known for its sneaky phishing attacks and exploiting security flaws, emerged as a big threat in the cyber world, especially targeting enterprises. 🌆💻🔓
Source: BleepingComputer
Tags: #Ransomware #Dallas #CyberAttack #InfoSec #RoyalRansomware 🏙️🔒🚫
The cybercriminals also prepared for the deployment of the ransomware by placing Cobalt Strike command-and-control beacons throughout the City’s systems.
#Cyberattacks #Dallas #Cybersecurity #Texas #Ransomware #USA #RoyalRansomware
One of the U.S.’s most popular zoos has been hit with a cyberattack involving the theft of employee and vendor information, and a likely offshoot of the Royal ransomware gang is taking credit
Great write up by Unit 42 on Royal ransomware
The Royal Ransomware is claiming to have infiltrated public school management and virtual learning provider Edison Learning, posting on its dark web data leak site on Wednesday, April 26, that it had stolen 20GB of the company’s data “including personal information of employees and students” and threatening to post the data “early next week.”
Any intel on the ongoing Royal Ransomware campaign against high profile companies? (e.g. ARSAT)
The DefendOps Diaries
🛡 
Freemind
Jon Greig
DIESEC
IntelSoup 
Mark Dunk
DarkWebMallCop
Geekmaster 👽
Alejandro 